$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/KX-1y8bP0YfngW8IGNviv5v9sy0.roa File: KX-1y8bP0YfngW8IGNviv5v9sy0.roa (raw, json) Hash identifier: Vei2RGmM0J7Rft4SPc07TKqDTseQSesboAakdLRK5Xw= Subject key identifier: 29:7F:B5:CB:C6:CF:D1:87:E7:81:6F:08:18:DB:E2:BF:9B:FD:B3:2D Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 1EA2 Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/KX-1y8bP0YfngW8IGNviv5v9sy0.roa Signing time: Fri 01 Sep 2023 10:16:17 +0000 ROA not before: Fri 01 Sep 2023 10:16:17 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 24163 IP address blocks: 211.76.54.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Jun 2024 23:59:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7842 (0x1ea2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Sep 1 10:16:17 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=297FB5CBC6CFD187E7816F0818DBE2BF9BFDB32D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:74:cc:4e:a5:bd:a8:f6:ca:3b:9b:fe:c7:18: aa:c3:df:ff:f1:5f:5e:d1:c2:27:de:3d:80:71:d3: 74:95:b4:f4:fc:16:b2:19:28:54:68:da:6f:c6:56: 08:7d:20:ef:d5:47:dd:7d:01:9d:c6:8b:06:5c:89: 5e:47:75:9d:8b:56:22:02:6a:60:c1:da:b5:31:59: 2a:65:d5:8e:c9:c5:bf:e0:97:21:45:f8:d7:e0:2c: a7:61:31:7b:56:f6:0f:ba:b9:7a:44:cf:1a:4b:43: 97:3f:00:56:2b:ad:04:e3:1a:94:8b:c7:87:a1:8e: b0:b7:17:2e:85:d9:fe:12:53:e3:8d:10:c4:de:23: f1:c8:76:27:62:6d:27:7c:d4:64:37:6c:40:ab:d9: 5f:36:64:36:18:00:73:0c:19:93:21:a2:23:03:e8: 67:8c:04:32:ef:3b:c8:8b:54:8e:81:7c:9d:04:50: f6:fd:e3:ab:a5:57:0d:f0:42:8a:cd:de:4e:28:a0: 7c:84:9b:6f:ae:21:a7:9e:e0:65:ff:3f:30:a9:fa: bd:6c:e2:58:e4:cc:08:3f:04:b4:ed:1a:1e:ba:d9: a4:2b:94:28:09:a6:77:cc:b8:14:d6:01:7d:2a:e4: 6c:ac:d3:ba:11:f1:1d:df:17:87:ed:7b:1e:25:65: d3:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:7F:B5:CB:C6:CF:D1:87:E7:81:6F:08:18:DB:E2:BF:9B:FD:B3:2D X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/KX-1y8bP0YfngW8IGNviv5v9sy0.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 211.76.54.0/24 Signature Algorithm: sha256WithRSAEncryption 4b:07:86:af:97:8d:86:8d:0c:58:78:b5:cb:87:dc:06:1d:f7: 37:b1:bd:61:a9:04:9f:65:dc:ba:40:84:55:09:70:75:e5:65: 28:60:6a:2d:c4:d9:89:87:1a:c8:34:a7:68:4c:dd:95:80:d1: fe:54:8a:77:4c:7f:a4:6e:70:4a:d8:b5:73:4e:c6:ba:9d:6a: 58:93:25:fe:10:f1:53:21:a6:a2:e0:23:00:da:49:4a:19:e9: f1:be:d2:7c:b2:a4:6e:5d:19:9c:7f:a0:8f:a0:c9:16:fc:9d: 32:95:84:27:1f:13:15:b6:ec:6e:d6:bf:93:1e:a3:ae:16:c2: fe:c1:5d:a1:71:4e:38:05:9c:7a:13:e0:fd:9a:b9:8c:3e:12: 1d:6c:0c:67:0f:af:40:60:81:04:d3:35:51:a7:b8:6d:d6:2d: b2:ba:00:71:c1:38:56:9d:38:d4:a8:e1:67:b7:56:39:51:2a: fd:0d:58:ce:5f:16:1c:60:98:ad:f4:61:07:14:ed:34:9c:17: 15:8d:20:f2:01:d8:aa:b7:a1:94:d1:b6:2d:97:23:27:27:b2: 09:9b:07:ac:58:f1:43:31:85:b2:78:d5:10:87:a8:fe:46:0f: fb:62:41:62:64:aa:17:b5:c3:9f:3b:8a:79:ac:d4:21:b1:eb: ca:3d:6b:28 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICHqIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMzA5MDEx MDE2MTdaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDI5N0ZCNUNCQzZDRkQx ODdFNzgxNkYwODE4REJFMkJGOUJGREIzMkQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCqdMxOpb2o9so7m/7HGKrD3//xX17RwifePYBx03SVtPT8FrIZ KFRo2m/GVgh9IO/VR919AZ3GiwZciV5HdZ2LViICamDB2rUxWSpl1Y7Jxb/glyFF +NfgLKdhMXtW9g+6uXpEzxpLQ5c/AFYrrQTjGpSLx4ehjrC3Fy6F2f4SU+ONEMTe I/HIdidibSd81GQ3bECr2V82ZDYYAHMMGZMhoiMD6GeMBDLvO8iLVI6BfJ0EUPb9 46ulVw3wQorN3k4ooHyEm2+uIaee4GX/PzCp+r1s4ljkzAg/BLTtGh662aQrlCgJ pnfMuBTWAX0q5Gys07oR8R3fF4ftex4lZdO/AgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUKX+1y8bP0YfngW8IGNviv5v9sy0wHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL0tYLTF5OGJQMFlmbmdXOElH TnZpdjV2OXN5MC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADT TDYwDQYJKoZIhvcNAQELBQADggEBAEsHhq+XjYaNDFh4tcuH3AYd9zexvWGpBJ9l 3LpAhFUJcHXlZShgai3E2YmHGsg0p2hM3ZWA0f5UindMf6RucErYtXNOxrqdaliT Jf4Q8VMhpqLgIwDaSUoZ6fG+0nyypG5dGZx/oI+gyRb8nTKVhCcfExW27G7Wv5Me o64Wwv7BXaFxTjgFnHoT4P2auYw+Eh1sDGcPr0BggQTTNVGnuG3WLbK6AHHBOFad ONSo4We3VjlRKv0NWM5fFhxgmK30YQcU7TScFxWNIPIB2Kq3oZTRti2XIycnsgmb B6xY8UMxhbJ41RCHqP5GD/tiQWJkqhe1w587inms1CGx68o9ayg= -----END CERTIFICATE-----Generated at Mon Jun 3 12:44:07 2024 by rpki-client on console-fra.rpki-client.org